Web Security Papers

Explore a curated collection of web security papers that delve into identifying vulnerabilities in web applications through advanced techniques like fuzzing and program analysis.
Source Code: GitHub RepositoryLast Updated: Thu, 19 Jun 2025 12:18:56 GMT
📊 View Detailed Analytics
IDTier
504
DART: directed automated random testing
URL
PDF
Slide
2005
SIGPLAN
CCF-A
TH-CPL-A
3648182.40
193
Sysevr: A framework for using deep learning to detect software vulnerabilities
URL
PDF
Code
2021
TDSC
CCF-A
TH-CPL-A
672168.00
253
Devign: Effective vulnerability identification by learning comprehensive program semantics via graph neural networks
PDF
2019
NeurIPS
CCF-A
TH-CPL-A
930155.00
354
Driller: Augmenting fuzzing through selective symbolic execution
DOI
PDF
2016
NDSS
CCF-A
TH-CPL-A
1210134.44
163
Deep learning based vulnerability detection: Are we there yet?
URL
PDF
2021
TSE
TH-CPL-A
529132.25
205
AFL++: Combining incremental steps of fuzzing research
URL
PDF
2020
WOOT
619123.80
507
Dynamic Taint Analysis for Automatic Detection, Analysis, and SignatureGeneration of Exploits on Commodity Software
PDF
2005
NDSS
CCF-A
TH-CPL-A
2438121.90
350
Coverage-based greybox fuzzing as markov chain
DOI
URL
PDF
2016
CCS
CCF-A
TH-CPL-A
1056117.33
203
A survey on ethereum systems security: Vulnerabilities, attacks, and defenses
URL
PDF
2020
CSUR
573114.60
51
Using an LLM to Help With Code Understanding
PDF
2024
ICSE
TH-CPL-A
107107.00
296
Contractfuzzer: Fuzzing smart contracts for vulnerability detection
DOI
URL
PDF
2018
ASE
TH-CPL-B
749107.00
327
Directed greybox fuzzing
DOI
URL
PDF
2017
CCS
CCF-A
TH-CPL-A
839104.88
Type: Survey
476
Automated Whitebox Fuzz Testing
URL
PDF
Slide
2008
NDSS
CCF-A
TH-CPL-A
1762103.65
Type: Survey
344
VUzzer: Application-aware Evolutionary Fuzzing
URL
PDF
PDF
Code
2017
NDSS
CCF-A
TH-CPL-A
829103.63
300
Evaluating Fuzz Testing
URL
PDF
2018
CCS
CCF-A
TH-CPL-A
719102.71
439
Evosuite: automatic test suite generation for object-oriented software
URL
PDF
Slide
Homepage
Video
2011
FSE
TH-CPL-A
133195.07
416
Symbolic execution for software testing: three decades later
DOI
URL
PDF
2013
CACM
113194.25
288
Angora: Efficient fuzzing by principled search
URL
PDF
2018
IEEE S&P
CCF-A
TH-CPL-A
65894.00
513
Search-based software test data generation: a survey
PDF
2004
STVR
194592.62
282
The Art, Science, and Engineering of Fuzzing: A Survey
URL
URL
PDF
PDF
2019
TSE
TH-CPL-A
55292.00
Type: Survey
237
Software vulnerability detection using deep neural networks: a survey
URL
URL
PDF
2020
Proceedings of the IEEE
43186.20
59
An Empirical Evaluation of Using Large Language Models for Automated Unit Test Generation
2023
TSE
TH-CPL-A
16783.50
402
An orchestrated survey of methodologies for automated software test case generation
DOI
URL
PDF
2013
JSS
TH-CPL-B
95979.92
Type: Survey
390
Modeling and discovering vulnerabilities with code property graphs
PDF
2014
IEEE S&P
CCF-A
TH-CPL-A
87679.64
304
Fuzzing for Software Security Testing and Quality Assurance
URL
PDF
2018
Artech House
55479.14
Type: Book
454
All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (But Might Have Been Afraid To Ask)
URL
PDF
2010
IEEE S&P
CCF-A
TH-CPL-A
112074.67
294
Collafl: Path sensitive fuzzing
URL
PDF
2018
IEEE S&P
CCF-A
TH-CPL-A
50572.14
30
Large Language Model guided Protocol Fuzzing
PDF
2024
NDSS
CCF-A
TH-CPL-A
6767.00
Technique: Large Language Model
157
Automatic Inference of Search Patterns for Taint-Style Vulnerabilities
PDF
2021
IEEE S&P
CCF-A
TH-CPL-A
25664.00
129
Fuzzing: A Survey for Roadmap
DOI
URL
2022
CSUR
18963.00
Type: Survey
272
REDQUEEN: Fuzzing with Input-to-State Correspondence
URL
PDF
2019
NDSS
CCF-A
TH-CPL-A
37362.17
79
Large Language Models are Few-shot Testers: Exploring LLM-based General Bug Reproduction
2023
ICSE
TH-CPL-A
12361.50
333
Learn&fuzz: Machine learning for input fuzzing
URL
PDF
2017
ASE
TH-CPL-B
47759.63
489
Fuzzing: Brute Force Vulnerability Discovery
URL
PDF
2007
Addison-Wesley
105058.33
Type: Book
342
Software vulnerability analysis and discovery using machine-learning and data-mining techniques: A survey
PDF
2017
CSUR
46658.25
198
Vulnerability detection with fine-grained interpretations
PDF
2021
FSE
TH-CPL-A
23057.50
316
T-Fuzz: fuzzing by program transformation
URL
PDF
2018
IEEE S&P
CCF-A
TH-CPL-A
39256.00
197
Vuldeelocator: a deep learning-based fine-grained vulnerability detector
PDF
2021
TDSC
CCF-A
TH-CPL-A
22355.75
330
FairFuzz: a targeted mutation strategy for increasing greybox fuzz testing coverage
DOI
URL
PDF
2017
ASE
TH-CPL-B
44355.38
340
Skyfire: Data-driven seed generation for fuzzing
URL
PDF
2017
IEEE S&P
CCF-A
TH-CPL-A
44155.13
267
MOPT: Optimized mutation scheduling for fuzzers
URL
PDF
Slide
2019
USENIX Security
CCF-A
TH-CPL-A
32854.67
496
Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities
PDF
2006
IEEE S&P
CCF-A
TH-CPL-A
103354.37
130
Fuzzing: Challenges and reflections
URL
PDF
2022
Software
16053.33
521
An empirical study of the reliability of UNIX utilities
DOI
URL
PDF
1990
CACM
181451.83
212
Combining Graph-Based Learning With Automated Data Collection for Code Vulnerability Detection
PDF
2020
TIFS
CCF-A
TH-CPL-A
24949.80
510
Finding Security Vulnerabilities in Java Applications with Static Analysis
PDF
2005
USENIX Security
CCF-A
TH-CPL-A
95447.70
355
LAVA: large-scale automated vulnerability addition
DOI
URL
PDF
2016
IEEE S&P
CCF-A
TH-CPL-A
42947.67
305
Fuzzing: a survey
URL
PDF
2018
Cybersecurity
32846.86
Type: Survey
33
Make LLM a Testing Expert: Bringing Human-like Interaction to Mobile GUI Testing via Functionality-aware Decisions
URL
PDF
2024
ICSE
TH-CPL-A
4646.00
384
Cross-Tenant Side-Channel Attacks in PaaS Clouds
URL
PDF
2014
CCS
CCF-A
TH-CPL-A
50445.82
268
NAUTILUS: Fishing for Deep Bugs with Grammars
PDF
2019
NDSS
CCF-A
TH-CPL-A
27345.50
488
Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis
PDF
2007
NDSS
CCF-A
TH-CPL-A
81745.39
501
The essence of command injection attacks in web applications
URL
PDF
2006
SIGPLAN
CCF-A
TH-CPL-A
86045.26
343
Steelix: program-state based binary fuzzing
URL
PDF
2017
FSE
TH-CPL-A
36045.00
481
Grammar-based whitebox fuzzing
URL
PDF
2008
PLDI
TH-CPL-A
74643.88
Type: Survey
308
Hawkeye: Towards a Desired Directed Grey-box Fuzzer
URL
PDF
2018
CCS
CCF-A
TH-CPL-A
30743.86
515
Securing web application code by static analysis and runtime protection
PDF
2004
WWW
CCF-A
TH-CPL-A
91443.52
280
Superion: Grammar-aware greybox fuzzing
URL
PDF
2019
ICSE
TH-CPL-A
25943.17
307
Fuzzing: The State of the Art
DOI
URL
PDF
2018
TR
29141.57
Type: Survey
278
Smart greybox fuzzing
URL
PDF
2019
TSE
TH-CPL-A
24340.50
422
Fuzzing with code fragments
URL
PDF
Slide
2012
USENIX Security
CCF-A
TH-CPL-A
51639.69
220
GREYONE: Data flow sensitive fuzzing
URL
PDF
Slide
2020
USENIX Security
CCF-A
TH-CPL-A
19639.20
319
What You Corrupt Is Not What You Crash: Challenges in Fuzzing Embedded Devices
PDF
2018
NDSS
CCF-A
TH-CPL-A
27038.57
169
Fuzzbench: an open fuzzer benchmarking platform and service
DOI
URL
PDF
2021
FSE
TH-CPL-A
15438.50
10
Code-Aware Prompting: A Study of Coverage-Guided Test Generation in Regression Setting using LLM
URL
2024
FSE
TH-CPL-A
3838.00
236
Savior: Towards bug-driven hybrid testing
URL
PDF
2020
IEEE S&P
CCF-A
TH-CPL-A
18737.40
5
Automated Unit Test Improvement using Large Language Models at Meta
URL
2024
FSE
TH-CPL-A
3737.00
463
TaintScope: A Checksum-Aware Directed Fuzzing Tool for Automatic Software Vulnerability Detection
URL
PDF
Slide
2010
IEEE S&P
CCF-A
TH-CPL-A
55537.00
467
Automatic creation of SQL Injection and cross-site scripting attacks
DOI
URL
PDF
2009
ICSE
TH-CPL-A
57936.19
274
Restler: Stateful rest api fuzzing
URL
PDF
Slide
Code
2019
ICSE
TH-CPL-A
21736.17
Target: Web Application
Target: RESTful API
461
State of the art: Automated black-box web application vulnerability testing
URL
PDF
2010
IEEE S&P
CCF-A
TH-CPL-A
52334.87
273
RESTful API Automated Test Case Generation with EvoMaster
URL
Code
2019
TOSEM
TH-CPL-A
20734.50
509
Finding application errors and security flaws using PQL: A program query language
PDF
PDF
2005
SIGPLAN
CCF-A
TH-CPL-A
68634.30
484
Saner: Composing static and dynamic analysis to validate sanitization in web applications
URL
PDF
2008
IEEE S&P
CCF-A
TH-CPL-A
57433.76
486
Static detection of cross-site scripting vulnerabilities
URL
PDF
2008
ICSE
TH-CPL-A
57333.71
271
Razzer: Finding kernel race bugs through fuzzing
URL
PDF
2019
IEEE S&P
CCF-A
TH-CPL-A
20133.50
473
TAJ: effective taint analysis of web applications
URL
PDF
Slide
Slide
2009
SIGPLAN
CCF-A
TH-CPL-A
52732.94
289
Automated software vulnerability detection with machine learning
DOI
URL
PDF
2018
arXiv
22532.14
472
Taint-based directed whitebox fuzzing
URL
PDF
2009
ICSE
TH-CPL-A
50731.69
492
Sound and Precise Analysis of Web Applications for Injection Vulnerabilities
URL
PDF
2007
PLDI
TH-CPL-A
55831.00
258
Full-speed fuzzing: Reducing fuzzing overhead through coverage-guided tracing
URL
PDF
2019
IEEE S&P
CCF-A
TH-CPL-A
18130.17
341
SlowFuzz: Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities
DOI
URL
PDF
2017
CCS
CCF-A
TH-CPL-A
23929.88
438
DTA++: Dynamic Taint Analysis with Targeted Control-Flow Propagation
PDF
2011
NDSS
CCF-A
TH-CPL-A
41829.86
276
Semantic fuzzing with zest
URL
PDF
2019
ISSTA
TH-CPL-A
17729.50
18
Enhancing Static Analysis for Practical Bug Detection: An LLM-Integrated Approach
URL
PDF
Homepage
2024
OOPSLA
TH-CPL-A
2929.00
Technique: Large Language Model (LLM)
235
RESTTESTGEN: Automated Black-Box Testing of RESTful APIs
PDF
Code
2020
ICST
TH-CPL-B
14529.00
266
Minemu: The World's Fastest Taint Tracker
PDF
2019
RAID
TH-CPL-B
17429.00
499
Static Detection of Security Vulnerabilities in Scripting Languages
URL
PDF
2006
USENIX Security
CCF-A
TH-CPL-A
55028.95
391
Optimizing seed selection for fuzzing
URL
PDF
Slide
2014
USENIX Security
CCF-A
TH-CPL-A
31528.64
500
Taint-Enhanced Policy Enforcement: A Practical Approach to Defeat a Wide Range of Attacks
PDF
2006
USENIX Security
CCF-A
TH-CPL-A
53428.11
358
ProTracer: Towards Practical Provenance Tracing by Alternating Between Logging and Tainting
PDF
2016
NDSS
CCF-A
TH-CPL-A
25027.78
431
Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
URL
PDF
2012
IEEE S&P
CCF-A
TH-CPL-A
35627.38
518
Web application security assessment by fault injection and behavior monitoring
DOI
URL
PDF
2003
WWW
CCF-A
TH-CPL-A
59627.09
196
UNIFUZZ: A Holistic and Pragmatic Metrics-Driven Platform for Evaluating Fuzzers
URL
PDF
Slide
Code
2021
USENIX Security
CCF-A
TH-CPL-A
10827.00
226
Memlock: Memory usage guided fuzzing
URL
PDF
2020
ICSE
TH-CPL-A
13527.00
230
Not All Coverage Measurements Are Equal: Fuzzing by Coverage Accounting for Input Prioritization
URL
PDF
PDF
2020
NDSS
CCF-A
TH-CPL-A
12825.60
361
TaintART: A Practical Multi-level Information-Flow Tracking System for Android RunTime
PDF
2016
CCS
CCF-A
TH-CPL-A
22925.44
145
Stateful greybox fuzzing
URL
PDF
Slide
2022
USENIX Security
CCF-A
TH-CPL-A
7625.33
506
Defending Against Injection Attacks Through Context-Sensitive String Evaluation
URL
PDF
2005
RAID
TH-CPL-B
50225.10
279
Soliaudit: Smart contract vulnerability assessment based on machine learning and fuzz testing
DOI
URL
PDF
2019
IoTSMS
15025.00
0 of 522 row(s) selected.